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Abstract 



A boolean function of n boolean variables is correlation-immune of order k if the 
function value is uncorrelated with the values of any k of the arguments. Such func- 
tions are of considerable interest due to their cryptographic properties, and are also 
related to the orthogonal arrays of statistics and the balanced hypercube colourings 
of combinatorics. The weight of a boolean function is the number of argument val- 
ues that produce a function value of 1. If this is exactly half the argument values, 
that is, 2""^ values, a correlation-immune function is called resilient. 

An asymptotic estimate of the number N{n, k) of n-variable correlation-immune 
boolean functions of order k was obtained in 1992 by Denisov for constant k. Denisov 
repudiated that estimate in 2000, but we will show that the repudiation was a 
mistake. 

The main contribution of this paper is an asymptotic estimate of N{n, k) which 
holds if k increases with n within generous limits and specialises to functions with 
a given weight, including the resilient functions. In the case of A; = 1, our estimates 
are valid for all weights. 

1 Introduction 

Let n,k,q be integers satisfying 1 < k < n and < < 2", and define A = 2^q/2"'. 
A correlation-immune boolean function of n variables, order k and weight 2^q is a boolean- 
valued function of n boolean variables with this property: if any k arguments are given 
arbitrary values, exactly the fraction A of the 2"^*"' possible assignments to the remaining 
arguments give a function value of 1. (See for example [HI [131 IE] and [HI Chapter 4].) 
Let N{n, k, q) denote the number of such functions. An important special case is the 
resilient functions, which have A = |. Correlation- immune functions, and in particular 
the resilient functions, have desirable cryptographic properties: see for example [21 [13] . 
In this paper we will derive an asymptotic estimate of N{n, k, q) for a wide range of k and 
q values, and deduce an asymptotic formula for the sum N{n, k) = J2q N{n, k, q), which 
is the number of correlation-immune boolean functions of n variables and order k. 

An n-variable boolean function can be represented as a matrix of n columns over {0, 1} 
whose rows consist of those argument lists which give the function value 1. A correlation- 
immune boolean function of n variables, order k and weight 2^q gives rise to a matrix with 
2^g distinct rows and n columns, such that in any set of k columns each of the 2^^ possible 
0-1 patterns appears exactly q times. In statistics, such a matrix is called an orthogonal 
array of 2 levels, n variables, 2^g runs, and strength k; see [8] for a detailed exposition. 
Since the 2^q rows are by definition distinct, and permuting the rows does not change 
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the associated function, there is an uninteresting ratio of (2*^5)! between the number of 
matrices and the number of functions. We will work with functions rather than matrices. 

The special case k = 1 has also been studied under the name of balanced colourings of 
a hypercube. These are placements of equal weights on some of the vertices of a hypercube 
such that the centroid is at the center of the hypercube. Exact enumerations have been 
found in this case [HI EI], but they do not appear suitable for asymptotics. 

Early papers on the number of correlation-immune functions focussed on the case 
k = 1. Upper and lower bounds for N{n, 1) were given in [HI [IHl [121 ED] but these do not 
appear as sharp as the bounds given by Bach [T]. 

The case of general k was first considered by Schneider |15j , who gave upper bounds for 
N{n, k, q) as well as for N{n, k). For large k an improved upper bound is given by Carlet 
and Klapper [1], both for N{n,k) and for the resilient functions of order k. Carlet and 
Gouget [3] gave an upper bound for the number of resilient functions of order k, which 
improves upon Schneider's bound for k > n/2 — 1 and which partially improves upon 
the upper bound of [4J. Tarannikov [TB] proved that when c is a fixed positive integer, 
the function N{n, n — c) is bounded above by a polynomial in n. Exact expressions for 
N{n, n — c) when c = 1, 2, 3 are also given in [TBI Theorem 3]. (See also [17J.) 

The first asymptotic enumeration of correlation-immune functions was achieved by 
Denisov. Define 



Denisov's formula for N{n, 1) was refined by Bach [T], who showed that an asymptotic 
expansion for N{n, 1) exists and calculated the first few terms of it. 

In a later paper [7], Denisov repudiated Theorem 11.11 and proposed a different value. 
However, we will show that Denisov's repudiation was a mistake, and Theorem 11.11 is 
correct. More discussion of [7] is given in Section [81 

We now state our results. Define 



In addition to common asymptotic notations like O(-), we use uj{f{n)) to represent any 
function g{n) such that g{n)/ f{n) — > cxo as n — > 00. 





A = \{l-\). 



3 



Theorem 1.2. Consider a sequence of triples {n, k, q) of positive integers such that n 
oo and 

ij{2^''n^^+^M^) <q< 2""*^ - u{2^''n^''+^M^) . (1.1) 

Then 

Nin,k,q) = 2^ {X\l - Xy-'y'" (vr A 2"+^ (l + 0(r^(n, A;, g))), (1.2) 
where r/(n, A;,g) = 2-^/^+^V+'^/^M^/^X-^/^{l-\y^/^ = o(l). 

Remark 1.1. Given a function g in the class counted by N{n, k, q), we can form another, 
namely 1 — g, counted by N{n, k, 2"^^—q). This complementation operation is a bisection 
which exchanges q with 2*^"^— g and A with 1— A. This means, for example, that we can 
assume A < | m our proof when it is convenient. 

Remark 1.2. By Stirling's formula, logM = o(n) whenever k = 0{n/ logn). From this 
it follows that ( 11.11) is non-vacuous whenever 

l<k<('^-e)^ (1.3) 

for some e > 0. 



6 / log n 



Corollary 1.1. If k = k{n) satisfies (11.31) then, as n —>■ oo, the number of k-resilient 
boolean functions of n variables is 

Corollary 1.2. // k = k{n) satisfies ( \1.3\\ then, as n — »• oo, the number of order k 
correlation-immune boolean functions of n variables is 

N{n, k) = 22"+Q-^(2"-i7r)-(^'^-i)/2 ^ q(2-"/2+3 ^^+3/2^^^3/2)^ (^_4) 

^ 22"+Q-ki^2''-l^Y(M-l)/2_ 

Corollary 11.21 shows that Denisov's result Theorem 1 1.1 1 is true, despite his later retrac- 
tion. 

In Section [2], we write A^(n, k, q) as an integral in many complex dimensions. In 
Section [3] we identify the points where the integrand has maximum magnitude and define 
a region TZ+C consisting of a small hypercuboid surrounding each of those points. The 
integral is then bounded outside IZ+C in Section [Hand estimated inside TZ+C in Section O 
The proof of Theorem 11.21 is completed in Section [H] where we also prove Corollaries 11.11 
and II. 2[ In the final sections we consider some additional topics including a closer look 
at the case k = 1 and a connection with Hadamard matrices. 
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2 The desired quantity as a complex integral 



Define [n] = {1, 2, . . . , n} and Ik = {S e 2^ : \S\ < k}. We will identify N{n, k, q) as the 
constant term in a generating function over the M variables {x s '■ S E Ik} ■ Let x denote 
a vector of all these variables, in arbitrary order. For D = A/(l — A), define the rational 
function F{x) by 

n^)= n (i+^n 

where 

"5 = n 

for each S (including the case q;0 = 1). The value of D is determined by a saddle point 
condition, as will become apparent in Section [51 

Lemma 2.1. N{n,k,q) is the constant term of {Dxti))^'^'''^F{x) . 

Proof. For a boolean function g{yi, . . . , ?/„), the Walsh transform of (7 is the real- valued 
function g over {0, 1}" defined by 

g{w,, ...,wn)= Yl 9{yu ...,yn) {-ir^y^+-+--y-. 

fei,...,s/n)e{o,i}" 

Given a G {±1}", form a G {0, 1}" from a by changing each 1 entry into and each — 1 
entry into 1. 

For S & Ik, let ws G {0, 1}" be the characteristic vector of S. Then, given a vector 
a G {±1}" and any 5* G Ik, we have 



as = {-If 



ws 



We can view F{x) as the sum of 2^" terms, with one term for each boolean function g of n 
variables. Specifically, the term corresponding to a boolean function g : {0, 1}" — {0, 1} 
is exactly 



n (Dl[xf)=D^^-^^l[ 



Xg 



3(a)=i 



By the spectral characterisation of correlation- immune functions [TU [T^], the boolean 
function g is correlation- immune of order k if and only if g{ws) = for all S" G \ {0}. 
Moreover, the functions counted by N{n, k, q) have g{w%) = 2^q. Therefore the coefficient 
of the monomial xl in F{x) is exactly D^'''^ N{n, k,q). □ 
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By Cauchy's integral formula, it follows from Lemma [2.11 that 

1 If 



where each xs is integrated anticlockwise around a circle of radius 1 centred at the origin. 
Now introduce variables 6s {S G X^) and the M-dimensional vector of the 6s variables 
in arbitrary order. Change variables from x to using xs = e*^^ for each 5*. Then 

N(^^k,q) = -^±^^Iin,k,q), (2.1) 



where 



/7r rir 
•■■/ 0(0) dd, 
-77 J — TT 



ae{±l}" 



and 



fM = "^sOs. (2.3) 

The elements of 6 belong to the set M27r of real numbers modulo 27r. In this set, 
addition, and multiplication by integers, have their usual meanings. We use = to indicate 
equality in For example, 6' = means that 6 is the element of R27r corresponding to 
the real number 27rt for any integer t. Also let 

z : Mstt ^ (-7r,7r] 

be the standard mapping of M27r onto the real interval (— vr, vr] and define the absolute value 
d{6) = \z{6)\ for any 6 G M27r- Clearly d{-) satisfies the triangle inequality: d(6 + 6') < 
d{6) + d{6'). 



3 Analysis of the domain of integration 

The integrand G{d) defined in 02.21) has modulus at most 1. We will later show that the 
value of the integral J(n, k, q) comes mostly from the near vicinity of those points where 
equality occurs, so our next task will be to identify those points. Define 

C = {6eRli : \G{6)\ = 1}. 
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Lemma 3.1. 



C = I G : 2l^' J2 ^T = for each S G J^}, (3.1) 
and moreover \C\ = 2'^ . 



Proof. Throughout the proof we work in M2^. For 1 < j < n, define the hnear difference 
operator 6j by 

f {ai,...,aj,...,a„) • 

For S E Ik, define 6s = Yljes^j^ noting that the product is commutative. From the 
definition of fa{0) we can easily prove by induction on IS"! that 

6sfai0)=2^'^ J2 ^tOt. (3.2) 



Since 



1 + De' 



l + D 



V^l + 2D cos(x) + 



l + D 

a necessary and sufficient condition for 6 E C is that fa{0) = for all a G {±1}"". 

Suppose that 6 E C. Then, since fa{G) = for all a, the difference Ssfaoi^) satisfies 
Ssfaoi^) = for all S G Ik, where ao = {1,1, . . . , 1). By (13. 2p we conclude that 6 lies in 
the set C* given by the right hand side of (13. ip . and hence C C C*. Conversely, if E C* 
then every fa{0) = since 



/«W=(n{,:., = -l}(l-'5.))/«oW- 



Therefore, C = C*. 

Since the set of equations in (13. ip is triangular, we can find all solutions by choosing 
each 9s in order of decreasing 15*1. There are exactly 2l'^l choices for 9s, so the total 
number of solutions is |C| = 2*^. □ 

As noted in Remark 11.11 we will assume that A < | without losing generality. Let A 
be the positive number defined by 

The left side of (11.11) is equivalent to 

A = o{2-^''n-^^-^M-^). (3.3) 
Let 71 be the subset of defined by 

7^ = { 6» G : d{9s) < A(2n)-I^l for all SElk}- 



7 



This is a hypercuboid centred at the origin. Denote the union of 2*^ copies of IZ centred 
at the points in C by 

n+c = U {7^ + 6>*} C R^l. 

Since all the elements of vectors in C are integer multiples of 2'7r/2'^, it follows from (13.31) 
that these copies are disjoint. The region TZ+C includes all the points where |G'(^)| is 
maximal; we will prove in the following sections that in fact it includes all the points 
which contribute substantially to I{n, k, q). 



4 The integral outside the critical region 

Lemma 4.1. // the conditions of Theorem \l/A are satisfied and A < | then 

\G{0)\ dO < (27r)*^exp(-|nM), 



'{n+cy 

where {TZ+Cf = \ (7^+C). 

Proof. Fix G iJZ+CY. First we show that there exists some set Sq = So{6) G Xk such 
that 

d{6sofa{e)) > (2 - ei/2)An-l^°l (4.1) 

for all a G {±1}". Define 6* = 6*{6) G C recursively, as follows: starting with sets 
5 G Xfc with \S\ = k, and then proceeding to smaller k, choose 9g G M27r such that 
2'"^' Y^TeXkTDS = d{6s — 0*g) is minimal over all such choices of 6*g. (Break ties 
arbitrarily.) Since 6 ^ TZ+C, there is a set Sq G 1^ of maximum cardinality such that 

d{es,-ei;)>{2n)-\'^\/\. (4.2) 

By the maximality of 5*0 we have 



rf(^T-^;)<$^('')A(2 



< A(2n)"l'^«l^ — 

= (e^/' - l)A(2r2)-l^o'. (4.3) 
Now take any a G {±1}" and write, using (13.21) . 

TeXfc,TD5o 
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where 



Since 0* G C, (13.11) implies that Si = 0. Next, since d^aTOx) = d^Ox), (14.31) imphes that 

di^2) < (e'/' - l)An-l^ol. 

Finally, 

d{U) > An-I^«l, 

by (14. 2 p and the fact that d{9so ~ (^Sq) ^ 2"l'^"l7r. Therefore, using the triangle inequality, 
diSsJam = d{U + S2) > d{U) - d{T.^) > (2 - ei/2)A^H5o|^ 

Since a G {±1}" was arbitrary, this establishes the existence of the desired set 5*0. 

Next, partition the set {il}*^ into 2"^l'^''l parts, each of size 2l'^°l, such that two vectors 
a, a' belong to the same part if and only if they agree in every coordinate j ^ Sq. Let P 
be an arbitrary part of the partition. For any a G P, the difference Ssafai^) is a linear 
combination, with coefficients ±1, of the elements of the set {fa'{G) '■ 01 G P}. Therefore, 
by (14. ip and using the triangle inequahty. 



(2 - ei/2)An-l^°l < d{6sja{e)) < J2 dUAO)). 



(4.4) 



As 1 — cosx < 2x^/7r^ for — vr < x < vr, we find that for all x G 

2 

= 1 



1 + De"- 



l + D 



2D(1 - cosx) 



< 



exp 



= exp 
< exp 



(1 + P')2 

ADd{xy 
4A(1 - A) 



'4dix) 



d{x) 



using the assumption A < ^ for the last inequality. Thus, using the Cauchy-Schwarz 
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inequality and (I4.4p . 

n 



1 + De'^"^^^ 



l + D 



^ aeP ' 



< exp 



< exp 



7r2|P| 



A 



2-|5ol((2_eV2)An-l^ol)^ 



Since there are 2" l'^"' parts in the partition, taking the product over all parts and applying 
the definition of A gives 

1^(0)1 < exp(-(2 - el/2)2^-222fc-2l5ol+6^2fc-2l5„l+l^^ 

<exp(-26 i2-e'/^)\-\M), 
as I So I < k. Finally we note that 2^ (2 — e-'^/2)2 ^-2 > |^ go we have 

1^(0)1 < exp(-|nM). 

As this inequality holds for any ^ TZ+C and the volume of [TZ+Cy is at most {2it)^^ , 
the proof is complete. □ 



5 The integral inside the critical region 

Lemma 5.1. // the conditions of Theorem \1.2\ are satisfied and X < h then 



( 27r 

GiQ) de = ' , 



M/2 



(^^Q(25fc/2^3fc+3/2^3/2^-l/2)^)_ 



Proof. Let 6 = {6s)seik ^ this section we perform expansions that are valid in 

rather than ]R27r, so we identify d with {z{Os)) g^j^- Since 



exp U ^ as9s j = exp U ^ asz{ 



this identification has no effect on G{0). Also note that 

k 



^ asz{9s] 



< A^r''V2n)-^ <ei/2A. (5.1) 



Define 



h{x) = log 



j=0 

1 + L)e" 
l + D 
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By Taylor's Theorem with the integral form of the remainder (which also holds for 
complex- valued functions) , 

HUe)) = t ^ ue) - Uef + R{ue)) 

where 

R{U0)) = \h"'{t){ue) - tfdt. (5.2) 

Now cos(-) is unimodal on [— e-'^/^A, e^^^A] by (13.31) . Therefore for \t\ < e^^'^A we have 



DJl-2Dcos(t) + D^ 
I" «l = (l + 2Ccoswlz)')-V^ 

using the assumption that A < |. Hence by 05.1 p and (15.21) . 

A 6^/2 A 3 

|i?(/«(0))|<^— <2AA^ 

Then 



G(0) = exp(-z2V0+ E GTTD^"^^^"^7r^D)^^"^^^' + ^^^"^^)) 
= exp(a(0))exp('-iA ^ /„(0)2') 



aG{±l}" 

where 

a(0)= 5^ R{fa{e)). 

aG{±l}" 

The vanishing of the linear terms explains our choice of D. Note that a{0) is a complex 
number which is bounded in modulus by 

\a{6)\ < XT+^A\ (5.3) 

Next, note that the reflection 6 i-^ —6 preserves the region TZ and maps G{0) to its 
complex conjugate. It follows that 

G{6) dO 

n 
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is real, and therefore is equal to the integral of the real part of its integrand. Hence 



G{9)d0= j Re(exp(a(0))) exp(-iA ^ fa{9)A dO 
= Re(exp(a(0o))) ^exp(^-iA fa{Of^dO 



for some ^ ^) using the Intermediate Value Theorem. 

Since A2"A'^ = o(l) using (11.11) . it follows from (15. 3p that |a(0o)| < 1 when n is 
sufficiently large. It is routine to check that for any complex number z with \z\ < 1, 

exp(— 12;|) < Re(exp(2;)) < exp(|2;|). 

By (15. 3p we can apply this with z = a(0o) to find that 



'71 

Now we calculate that 



G'(6»)d0 = exp(O(A2"A3)) f exp(-^A J] f^{ef\dd 



oe{±i}" seife 
Since this quantity is real and A2"A^ = o(l), we have that 

/ G'(6') ci6> = (1 + 0(A2"A3)) TT / exp(-iA(l - A)2"e|) rf^5- 

Next we apply the well-known estimate 

g-«V(2<x2) du = aV2^ (1 + o(e-"'/')) for x ^ oo, 

■xa 

with a = (A(l - A)2")-i/2 ^^^^ ^ ^ A(2n)-I^'(T"^ > V32nM ^ oo. This gives 

A//2 



/ 27r V"^^ 
^(0) rf0 = [j(Y^^) (1 + 0(A2"A3) + 0{Me-''-'')) . 



(5.4) 



'7e 

The lemma follows on noting that the second error term is subsumed by the first. □ 



6 Proofs of Theorem 1.2 and its corollaries 



The theory we have developed over the preceding sections allows us to complete the proofs 
of our main results. 
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Proof of Theorem I j.£ By (12.11) we have that 



G{0)de+ [ G{e)de]. 



First suppose that A < ^. Then the first integral is 2^ JtiG, where /^G has been evalu- 
ated in Lemma 15.11 while the second integral is bounded in absolute value by Lemma 14.11 
and hence is covered by the error term of Lemma 15. 1[ This completes the proof when 
A < |, and the result follows for A > | by Remark [TTTl □ 

Corollary 11.11 follows from Theorem 11.21 by setting A = |. Corollary 11.21 requires a 
little more effort. 

Proof of Corollary We divide the interval of summation into five ranges. Define 

q, = \2-''-^n-'] , q, = [2"-'^-i - 2"/2-'=nl , q^ = 2""^ - q^, q, = 2""'= - q,. 
Also define 

W{X) = W{X,k,n) = 2^{7rAr+^y^'^\x^{l - A)^"^)"'", 

which is the right side of (11. 2p apart from the error term. 

We start with the range q G [q2, qs], for which A = |+0(2~"/^n). By Taylor expansion, 
we have for x = 0(2~"/^n) that 

W{l + x) = Vr(i)exp(-(2"+^ -2M)x2 + 0(2-V)). (6.1) 

The error term in (16. ip is smaller than 2~"/2+^'^n^'^+^/^M'^/^ for any A in this range so, by 
Theorem 11.21 

J2Nin,k,q) = {l + 0{2'^/''+V-''/''M'/^))W{^)J2h{q), 
q=g2 q=q2 

where h{q) = exp(— 2"^"+^^+^(2" — M){q — 2"-~'^"^)2). By Euler-Maclaurin summation 
(see for example [HI p. 36]), 

93 /.gg 



Y,Kq) = 0{e--') + {l + 0{2-)) / 

9=92 "^92 



h{q) dq 



= (1 + 0(2-"))7ri/22n-fc-i/2^2" - M)-i/2 
= (l + 0(2-"M))7ri/22"/2-fe-i/2_ 

This proves that X^glga ^(^' l) given by an expression of the same form as the right 
side of (KM . 
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Next consider the range q E [q'i, ^'2), which is the mirror image of the range g G (gs, ^4]. 
Then 

^^^^^^^^^ = ai(A)2" + a2(A)(A(l-A)2"-M), where 
uA 

1 — 2A 

ai(A) = log(A"^ - 1) + A - i and a2(A) 



2 - ^^-^ 2A(1-A)' 

For 2^<A<1 — 2^we find that A(l— A)2" > M, while ai(A) and a2(A) have the same 
sign as I — A. Therefore W{\) is unimodal in this range. Since rj{n, k, q) = o(l), we have 

92-1 

J2 Nin, k, q) = 0{T)W{\ - 2-"/2n) 
9=91 

= 0(2") exp(-(2-o(l)y)l^(|) 

using (16. ip . This shows that the sum over [gi,g2) is covered by the error term of the 
Corollary. By Remark ll. II the same conclusion holds for the summation from ^3 + 1 to ^4. 

Finally consider the range q G [0,gi), which is the mirror image of the range q G 
(g4, 2""'^]. Here we use the trivial bound 

|]iV(n,A;,g) < (s")^'^^ = 22"-^+o(n2'=) 
<?=o 



which also fits into the error term of the corollary. By Remark 11.11 the same conclusion 
holds for the summation from 54 + 1 to 2"~^, which completes the proof. □ 



7 More on the case k = \ 

In the case of /c = 1, which corresponds to the "balanced colourings" enumerated by 
Palmer, Read and Robinson [11], it is possible to fill in the range of very small or very 
large values of q excluded by (II. ip . 

Lemma 7.1. If < q = o(2"/2) then 

i2q)\Nin,l,q)= (^^J{l + 0iqy2-)). 

Proof. Generate a 2q x n matrix by a random process: for each column independently, 
randomly insert in g rows and 1 in the other q. This matrix is one of those counted by 
(2g)! N{n, 1, q) provided all the rows are different. (Recall that N[n, 1, q) counts matrices 
up to row order.) 
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The probability that a specified pair of rows are equal is 



2q-2\ / [2q 



g-1 
2q- 1 



< 2-", 



so, by the Bonferroni inequality, the probability that no two rows are equal is 1 — 0(g^/2"). 
This completes the proof. □ 

Theorem 7.1. Uniformly for < g < 2"""'^, 

//2"-iV\'' 

/2" 

/V(„.U) = ( 



(l + o(n^2'"/^)). 



Proof. We begin by motivating the given formula. Choose, uniformly at random, a set of 
2q distinct elements of {0, 1}". The event that exactly q of these elements have 1 in some 
specified position has probability 



2" 
2q 



Therefore, the theorem is stating that these n events are very close to being independent 
in some sense. 

We can derive the theorem from Theorem 11.21 and Lemma 17. 1[ First consider the case 
that 22"/5ni2/5 < g < 2"-2. Then, by Stirling's formula, 

i-l\-"/2. 



T 
2q 



(7rA2"-i)""^'(l + 0(n/g)) 



and 



and the theorem follows from Theorem II. 2[ 

In the case that < g < ^^'"■l^n^'^l^ , we calculate that 



2n-lN2 

1 



2"' 

2g. 



2q\ f 2" - 2q 
q)\2^-^-q 



2" 

2n-l 



2g 



2-29(1 + 0(9/2")), 



so the theorem follows from Lemma 17.11 

Finally, for 2^~'^ < < 2"~^, take the complement as in Remark II. 1^ noting that the 
binomial coefficients in the statement of the theorem are symmetric around q = 2""^. □ 
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8 Final remarks 



As mentioned in the Introduction, Denisov in [7j incorrectly repudiated the result from [S] 
that we quoted as Theorem ll.il Denisov's mistake was due to the incorrect computation 
of the matrix inverse on page 95 of 0. In fact the J, J element of is (— l)l'^l-l-^l2l^l 
for I ^ J and otherwise. Correcting the mistake shows that the critical value z'^Q~^z 
on page 97 equals 2^'^"""*'^ and not the value stated. Except for this error, Denisov would 
have extended Theorem 11.11 to k = o{n^^'^) and in fact would have matched Theorem 11.21 
(with a different vanishing error term) for k = 0(71^^"^) and 

for any positive constant p < sj^^- Note that our coverage of both k and q is consid- 
erably wider than that. 

Finally we mention a connection between correlation-immune boolean function and 
Hadamard matrices. Recall that a Hadamard matrix of order n is an n x n matrix over 
±1 whose columns are pairwise orthogonal. Such matrices are known to exist for n = 1, 
n = 2, and for infinitely many other n. If n > 2 then n = mod 4 is a necessary condition 
for the existence of a Hadamard matrix of order n. It is a long-standing open problem to 
show that this necessary condition is also sufficient. Let Hn be the number of Hadamard 
matrices of order n. By a simple normalization, it can be seen that Hn equals 2"^ times the 
number of Hadamard matrices whose leftmost column equals all +l's. If such a column 
is removed, and each —1 changed to 0, there remains an n x {n—1) matrix of the sort 
counted (up to row permutation) by A^(r2— 1, 2, n/4). Hence, iJ„ = 2"ra! A^(n— 1, 2, n/4) 
for n > 2. This connection raises the possibility of proving the Hadamard conjecture by 
asymptotic methods. Unfortunately, the coverage of Theorem 11.21 is inadequate for that 
purpose. 
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